./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3923474844 <...> Warning: Permanently added '10.128.1.34' (ED25519) to the list of known hosts. execve("./syz-executor3923474844", ["./syz-executor3923474844"], 0x7fffa60df720 /* 10 vars */) = 0 brk(NULL) = 0x5555872a2000 brk(0x5555872a2d00) = 0x5555872a2d00 arch_prctl(ARCH_SET_FS, 0x5555872a2380) = 0 set_tid_address(0x5555872a2650) = 5088 set_robust_list(0x5555872a2660, 24) = 0 rseq(0x5555872a2ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3923474844", 4096) = 28 getrandom("\x56\xb3\x21\xdf\xe3\xee\xd8\x49", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555872a2d00 brk(0x5555872c3d00) = 0x5555872c3d00 brk(0x5555872c4000) = 0x5555872c4000 mprotect(0x7fe132c45000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/vhost-net", O_RDWR) = 3 ioctl(3, VHOST_SET_OWNER, 0) = 0 memfd_create("\xa3\x9f\x6e\xb4\x64\x52\x04\x69\x35\x02\xac\xce\xe1\x88\x9d\x5b\x40\x38\xd7\xce\x1f\x20\x39\x49\x7f\x15\x1d\x93\x3d\xb5\xe7\x5c\x27\x4c\xe6\xd2\x8e\xbc\x29\x4a\x74\x54\x44\x71\x81\xcf\x81\xba\xe5\x31\xf5\x20\xc8\x10\x3e\xc9\x5c\x85\x17\x4c\xbf\xcf\x91\xdf\x4d\xf3\x02\x5e\x54\x2a", 0) = 4 write(4, "\x7f\x45\x4c\x46\x60\x00\x00\x2e\xd8\xe4\xf9\x77\x65\xce\x27\xb9\x03\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\xb7\x38\x00\x00\x00\x00\x00\x35\xf4\xc3\x84\x22\xa3\xbc\x82\x20\x00\x05\x00\x00\x00\x04\x02\x03\x00\xb3\x00\x00\x00\x00\x00\x2a\x00\x24\x00\xb3\xd7\xc5\x2e\xbf\x31\xa8\xd5\xc8\xc3\xc6\xcb\x00\x00\x00\x09\xe5\x00\xd5\xff\xff\xff\x05\xff\xff\xff\x03\x00\x4f\x9e\xf4\x00\x00\x00\x00\x00\x00\x00"..., 216) = 216 execveat(4, "", NULL, NULL, AT_EMPTY_PATH) = 0 --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=0xb7000000} --- [ 78.560810][ T5088] process 'syz-executor392' launched '/dev/fd/4' with NULL argv: empty string added [ 78.572729][ T5088] process 'memfd:ndRi5ም[@8 9I=\'LҎ)JtTDqρ1 >\LϑM^T*' started with executable stack [ 78.586767][ T5088] ------------[ cut here ]------------ [ 78.592451][ T5088] WARNING: CPU: 0 PID: 5088 at kernel/signal.c:762 signal_wake_up_state+0xec/0x120 [ 78.601770][ T5088] Modules linked in: [ 78.605676][ T5088] CPU: 0 PID: 5088 Comm: 4 Not tainted 6.9.0-rc5-syzkaller-00042-ge88c4cfcb7b8 #0 [ 78.614874][ T5088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 78.624934][ T5088] RIP: 0010:signal_wake_up_state+0xec/0x120 [ 78.630841][ T5088] Code: 10 e8 a8 ca 39 00 5b 41 5e 41 5f 5d e9 48 0a 54 0a e8 98 ca 39 00 48 89 df 5b 41 5e 41 5f 5d e9 da 06 0a 00 e8 85 ca 39 00 90 <0f> 0b 90 eb a3 48 c7 c1 fc 30 a9 8f 80 e1 07 80 c1 03 38 c1 0f 8c [ 78.650482][ T5088] RSP: 0018:ffffc9000304f918 EFLAGS: 00010093 [ 78.656561][ T5088] RAX: ffffffff815c36db RBX: ffff888026c5da00 RCX: ffff8880271a1e00 [ 78.664538][ T5088] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 78.672534][ T5088] RBP: 0000000000000000 R08: ffffffff815c3674 R09: fffff52000609f04 [ 78.680613][ T5088] R10: dffffc0000000000 R11: fffff52000609f04 R12: ffff888026c5da00 [ 78.688788][ T5088] R13: ffff8880271a2708 R14: 0000000000000108 R15: dffffc0000000000 [ 78.696786][ T5088] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 78.705728][ T5088] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 78.712330][ T5088] CR2: 00000000b7000000 CR3: 0000000012380000 CR4: 0000000000350ef0 [ 78.720411][ T5088] Call Trace: [ 78.723797][ T5088] [ 78.726740][ T5088] ? __warn+0x163/0x4e0 [ 78.730927][ T5088] ? signal_wake_up_state+0xec/0x120 [ 78.736241][ T5088] ? report_bug+0x2b3/0x500 [ 78.740803][ T5088] ? signal_wake_up_state+0xec/0x120 [ 78.746145][ T5088] ? handle_bug+0x3e/0x70 [ 78.750510][ T5088] ? exc_invalid_op+0x1a/0x50 [ 78.755198][ T5088] ? asm_exc_invalid_op+0x1a/0x20 [ 78.760252][ T5088] ? signal_wake_up_state+0x84/0x120 [ 78.765558][ T5088] ? signal_wake_up_state+0xeb/0x120 [ 78.770894][ T5088] ? signal_wake_up_state+0xec/0x120 [ 78.776315][ T5088] ? signal_wake_up_state+0xeb/0x120 [ 78.781628][ T5088] do_coredump+0x8ec/0x2b50 [ 78.786151][ T5088] ? srso_alias_return_thunk+0x5/0xfbef5 [ 78.791828][ T5088] ? srso_alias_return_thunk+0x5/0xfbef5 [ 78.797574][ T5088] ? do_raw_spin_lock+0x14f/0x370 [ 78.802632][ T5088] ? srso_alias_return_thunk+0x5/0xfbef5 [ 78.808294][ T5088] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 78.813702][ T5088] ? __pfx_do_coredump+0x10/0x10 [ 78.818659][ T5088] ? srso_alias_return_thunk+0x5/0xfbef5 [ 78.824350][ T5088] ? _raw_spin_unlock_irq+0x23/0x50 [ 78.829575][ T5088] ? srso_alias_return_thunk+0x5/0xfbef5 [ 78.835323][ T5088] ? lockdep_hardirqs_on+0x99/0x150 [ 78.840549][ T5088] get_signal+0x13fa/0x1740 [ 78.845087][ T5088] ? __pfx_get_signal+0x10/0x10 [ 78.849949][ T5088] ? __pfx_force_sig_fault+0x10/0x10 [ 78.855265][ T5088] arch_do_signal_or_restart+0x96/0x860 [ 78.860847][ T5088] ? srso_alias_return_thunk+0x5/0xfbef5 [ 78.866504][ T5088] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 78.872698][ T5088] ? irqentry_exit_to_user_mode+0x53/0x280 [ 78.878627][ T5088] irqentry_exit_to_user_mode+0x79/0x280 [ 78.884288][ T5088] exc_page_fault+0x585/0x8e0 [ 78.888999][ T5088] asm_exc_page_fault+0x26/0x30 [ 78.893866][ T5088] RIP: 0023:0xb7000000 [ 78.897952][ T5088] Code: Unable to access opcode bytes at 0xb6ffffd6. [ 78.904627][ T5088] RSP: 002b:00000000ff9e64a0 EFLAGS: 00010202 [ 78.910708][ T5088] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 78.918688][ T5088] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 78.926672][ T5088] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 78.934650][ T5088] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 78.942635][ T5088] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 78.950728][ T5088] [ 78.953762][ T5088] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 78.961046][ T5088] CPU: 0 PID: 5088 Comm: 4 Not tainted 6.9.0-rc5-syzkaller-00042-ge88c4cfcb7b8 #0 [ 78.970261][ T5088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 78.980326][ T5088] Call Trace: [ 78.983636][ T5088] [ 78.986578][ T5088] dump_stack_lvl+0x241/0x360 [ 78.991297][ T5088] ? __pfx_dump_stack_lvl+0x10/0x10 [ 78.996610][ T5088] ? __pfx__printk+0x10/0x10 [ 79.001217][ T5088] ? _printk+0xd5/0x120 [ 79.005399][ T5088] ? srso_alias_return_thunk+0x5/0xfbef5 [ 79.011052][ T5088] ? vscnprintf+0x5d/0x90 [ 79.015397][ T5088] panic+0x349/0x860 [ 79.019319][ T5088] ? __warn+0x172/0x4e0 [ 79.023498][ T5088] ? __pfx_panic+0x10/0x10 [ 79.027931][ T5088] ? show_trace_log_lvl+0x4e6/0x520 [ 79.033249][ T5088] __warn+0x346/0x4e0 [ 79.037258][ T5088] ? signal_wake_up_state+0xec/0x120 [ 79.042742][ T5088] report_bug+0x2b3/0x500 [ 79.047089][ T5088] ? signal_wake_up_state+0xec/0x120 [ 79.052396][ T5088] handle_bug+0x3e/0x70 [ 79.056561][ T5088] exc_invalid_op+0x1a/0x50 [ 79.061078][ T5088] asm_exc_invalid_op+0x1a/0x20 [ 79.065942][ T5088] RIP: 0010:signal_wake_up_state+0xec/0x120 [ 79.071853][ T5088] Code: 10 e8 a8 ca 39 00 5b 41 5e 41 5f 5d e9 48 0a 54 0a e8 98 ca 39 00 48 89 df 5b 41 5e 41 5f 5d e9 da 06 0a 00 e8 85 ca 39 00 90 <0f> 0b 90 eb a3 48 c7 c1 fc 30 a9 8f 80 e1 07 80 c1 03 38 c1 0f 8c [ 79.091472][ T5088] RSP: 0018:ffffc9000304f918 EFLAGS: 00010093 [ 79.097554][ T5088] RAX: ffffffff815c36db RBX: ffff888026c5da00 RCX: ffff8880271a1e00 [ 79.105540][ T5088] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 79.113518][ T5088] RBP: 0000000000000000 R08: ffffffff815c3674 R09: fffff52000609f04 [ 79.121505][ T5088] R10: dffffc0000000000 R11: fffff52000609f04 R12: ffff888026c5da00 [ 79.129579][ T5088] R13: ffff8880271a2708 R14: 0000000000000108 R15: dffffc0000000000 [ 79.137574][ T5088] ? signal_wake_up_state+0x84/0x120 [ 79.142893][ T5088] ? signal_wake_up_state+0xeb/0x120 [ 79.148206][ T5088] ? signal_wake_up_state+0xeb/0x120 [ 79.153511][ T5088] do_coredump+0x8ec/0x2b50 [ 79.158031][ T5088] ? srso_alias_return_thunk+0x5/0xfbef5 [ 79.163702][ T5088] ? srso_alias_return_thunk+0x5/0xfbef5 [ 79.169355][ T5088] ? do_raw_spin_lock+0x14f/0x370 [ 79.174405][ T5088] ? srso_alias_return_thunk+0x5/0xfbef5 [ 79.180068][ T5088] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 79.185477][ T5088] ? __pfx_do_coredump+0x10/0x10 [ 79.190433][ T5088] ? srso_alias_return_thunk+0x5/0xfbef5 [ 79.196123][ T5088] ? _raw_spin_unlock_irq+0x23/0x50 [ 79.201345][ T5088] ? srso_alias_return_thunk+0x5/0xfbef5 [ 79.206996][ T5088] ? lockdep_hardirqs_on+0x99/0x150 [ 79.212216][ T5088] get_signal+0x13fa/0x1740 [ 79.216926][ T5088] ? __pfx_get_signal+0x10/0x10 [ 79.221874][ T5088] ? __pfx_force_sig_fault+0x10/0x10 [ 79.227195][ T5088] arch_do_signal_or_restart+0x96/0x860 [ 79.233650][ T5088] ? srso_alias_return_thunk+0x5/0xfbef5 [ 79.239308][ T5088] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 79.245500][ T5088] ? irqentry_exit_to_user_mode+0x53/0x280 [ 79.251335][ T5088] irqentry_exit_to_user_mode+0x79/0x280 [ 79.257079][ T5088] exc_page_fault+0x585/0x8e0 [ 79.261780][ T5088] asm_exc_page_fault+0x26/0x30 [ 79.266647][ T5088] RIP: 0023:0xb7000000 [ 79.270729][ T5088] Code: Unable to access opcode bytes at 0xb6ffffd6. [ 79.277410][ T5088] RSP: 002b:00000000ff9e64a0 EFLAGS: 00010202 [ 79.283490][ T5088] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 79.291467][ T5088] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 79.299445][ T5088] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 79.307419][ T5088] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 79.315406][ T5088] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 79.323400][ T5088] [ 79.326748][ T5088] Kernel Offset: disabled [ 79.331126][ T5088] Rebooting in 86400 seconds..